Encrypted Filesystem on Docker

A distributed, Dockerized Capture-the-Flag platform built around FUSE-based encrypted filesystems

Every year, PRISME’s cryptography SPRINT gathers Master’s students at Université d’Orléans for a Jeopardy-style Capture-the-Flag exercise focused on crypto challenges. What makes it unusual is that every element of the challenge lives entirely on each student’s own machine — only score-keeping (via flag tokens) is centralized.

This research project (Travaux d’études et de recherches) set out to make that setup portable, distributed, and modular using Docker. The first phase studied encrypted filesystems on Linux — in particular FUSE — before building a self-contained, Dockerized mini crypto-SPRINT on top of what we’d learned.

Demo of the Dockerized challenge platform.

With Jérémy Muller and Maxime Joncherais.

Stack: Docker, FUSE, gocryptfs, Linux